UDP traffic
Datagrams matching asn:8402 sent to HoneyLabs sensors over UDP in the last 24 hours. DNS questions and QUIC client fingerprints are decoded on the sensor. Other datagrams are kept as their first bytes and labelled by protocol where it can be recognised.
A UDP source address can be forged, so each address listed here either sent the traffic or was impersonated by whoever did. UDP traffic is kept out of verdicts, feeds, watchlists and alerts.
2
Datagrams
1
Source addresses
1
Networks
1
Countries
2
Destination ports
Traffic by type
Unrecognised
2 datagrams from 1 sourceDatagrams no decoder recognised. Their first bytes are kept.
Latest Unrecognised datagram, to 1027/udp
payload bytes
00000000 2d 2e 4a 39 26 49 57 6c 34 3b 29 45 7b 72 09 70 |-.J9&IWl4;)E{r.p|
00000010 03 7a 2d 2c 17 4b 1b 71 5e 5e 46 21 5e 6e 37 0b |.z-,.K.q^^F!^n7.|
00000020 22 01 45 48 4a 1c 34 7f 57 5d 44 52 4f 4d 43 53 |".EHJ.4.W]DROMCS|
00000030 47 70 7f 5e 3c 1a 50 1a 79 16 3c 57 05 73 63 27 |Gp.^<.P.y.<W.sc'|
00000040 75 28 6f 3f 44 23 3e 1b 00 02 6d 8c b7 |u(o?D#>...m..|Amplification checks
Probes for services that answer a small request with a much larger reply, the property reflection attacks rely on.
| Service | Port | Datagrams | Sources | Factor |
|---|---|---|---|---|
| mDNS | 5353/udp | 1 | 1 | 2 to 10 |
The factor is how many bytes a reachable server can send back for each byte it receives, as published by CISA in alert TA14-017A.
Source addresses (unverified)
| Address | Network | Cc | Sends | Datagrams | Last seen (UTC) |
|---|---|---|---|---|---|
| 78.107.31.154 | AS8402 PVimpelCom | RU | Unrecognised | 2 | 2026-10-11 00:02 |
Latest datagrams
payload bytes
00000000 2d 2e 4a 39 26 49 57 6c 34 3b 29 45 7b 72 09 70 |-.J9&IWl4;)E{r.p| 00000010 03 7a 2d 2c 17 4b 1b 71 5e 5e 46 21 5e 6e 37 0b |.z-,.K.q^^F!^n7.| 00000020 22 01 45 48 4a 1c 34 7f 57 5d 44 52 4f 4d 43 53 |".EHJ.4.W]DROMCS| 00000030 47 70 7f 5e 3c 1a 50 1a 79 16 3c 57 05 73 63 27 |Gp.^<.P.y.<W.sc'| 00000040 75 28 6f 3f 44 23 3e 1b 00 02 6d 8c b7 |u(o?D#>...m..|payload bytes
00000000 3b 2e 47 32 27 6d 00 4b 5b 3a 44 74 2b 7f 0e 1f |;.G2'm.K[:Dt+...| 00000010 0d 25 27 4c 21 7b 63 23 2a 10 76 0a 16 7e 0b 51 |.%'L!{c#*.v..~.Q| 00000020 59 53 8a 66 |YS.f|